Section 108E. No company may, without the express and informed written consent of its insured or a covered family member of the insured acquired at the first notice of claim as defined in subdivision (G) of section one hundred and ten, disclose any information it may have acquired from or about any such insured or covered family member pertaining to the administration of benefits provided for expenses arising from the outpatient diagnosis or treatment or both of mental or nervous conditions under different terms and conditions than the consent required for the disclosure of information for other medical conditions; provided, however, that such informed consent shall include notification to the subscriber or covered family member of the right not to give such consent pursuant to clause (a); and, provided further, that:
(a) no such written consent from such subscriber or covered family member shall be made a condition of the receipt of such benefits or any other benefits for which the insured is covered under any blanket or general policy of insurance described in subdivision (A), (C), or (D) of section one hundred and ten;
(b) nothing contained in this section shall prohibit the disclosure of any information held by such company which is not privileged pursuant to section one hundred and thirty-five of chapter one hundred and twelve or section twenty B of chapter two hundred and thirty-three;
(c) a company shall not be prohibited from disclosing aggregate patient data if such data contains no information personally identifying any insured or family member of the insured;
(d) a company shall not be prohibited from disclosing patient utilization data to a law enforcement authority, a state board of registration, or a court of competent jurisdiction if the company, a law enforcement authority, or a state board of registration has reason to believe (i) a patient is committing or has committed fraud, or (ii) a provider is committing or has committed fraud or professional misconduct related to the provision of such diagnosis or treatment;
(e) nothing contained herein shall prohibit a company from using or disclosing patient information for coordination of benefits, subrogation, peer review or utilization review. For the purposes of this clause the term “coordination of benefits” shall mean the determination of primary and secondary responsibility for the payment of a claim between or among two or more insurers providing the same or similar coverage to an insured. Nothing contained herein shall prohibit a company from disclosing patient or provider identifiers to a self-insured plan administered by said company; provided, however, that such identifiers shall be used only for purposes of billing and audit; or
(f) nothing contained herein shall prohibit a company from disclosing patient information to an account which is self-insured in whole or in part, and administered by such company for research to be conducted by the account; provided, however, that no patient shall be the subject of such research without having first been notified by the account in writing of the scope and purpose of the research. Such written notice shall clearly state that the patient will not be a participant in any such research and will not be penalized in any way if the patient elects in writing to be excluded. Any research conducted by an account under this clause shall maintain the confidentiality of all identifiable patient information.